• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Issue SFTP access for additional FTP accounts – Public Key authentication?

TorbHo

Regular Pleskian
Server operating system version
Ubuntu 24
Plesk version and microupdate number
Plesk 18.0.80 Update 3
We are currently using Plesk 18.0.80 Update 3.

According to the changelog, this version introduces the following feature:
SFTP access for additional FTP accounts via a separate ProFTPD

We are trying this new feature, and SFTP access for additional FTP accounts works correctly when using password authentication.

However, we have not been able to authenticate using an SSH public key. Public key authentication works for our regular SSH accounts, but not for the additional FTP accounts using the new SFTP feature.
  • We added the public key using the Plesk extension "SSH Keys Manager".
  • We have added our public key using the Plesk extension "SSH Keys Manager".
  • Public key authentication itself is working correctly when connecting via the standard SSH/SFTP port 22. However, it does not work when connecting through the new SFTP port configured under:
    Tools & Settings → Security Policy

The configured port is open in the firewall and the SFTP connection itself can be established successfully. However, when connecting through this port, the server always asks for the account password instead of authenticating with the public key.

Does the new SFTP functionality for additional FTP accounts support public key authentication, or is it currently limited to password authentication only?

If public key authentication is supported, is there any additional configuration required in Plesk/ProFTPD to enable it for these accounts?
 
Back
Top